Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
File: qEOOrPTQZOh6drtGLTtLLMOFikw.mft (raw, json)
Hash identifier: pfde+9yfKVJBR/HuSljTvksnlfwWZcylAUc0fZ+hAUE=
Subject key identifier: 05:41:93:A4:39:64:87:92:D9:14:62:D8:EB:9B:B0:4F:E4:EB:26:B5
Authority key identifier: A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
Certificate issuer: /CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Certificate serial: 01987DC0D78CE9C53CBF71F7DBE6BEEFE68E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
Manifest number: 0D97
Signing time: Wed 06 Aug 2025 05:00:46 +0000
Manifest this update: Wed 06 Aug 2025 05:00:46 +0000
Manifest next update: Thu 07 Aug 2025 05:00:46 +0000
Files and hashes: 1: 1VL4lYJptkpi6ZtVoZgmoJ6ksn0.roa (hash: f1kBG9NlxREDPNdWOkJs8Cv0Ij2AV1IHOO/Hc9KsOpQ=)
2: eWIsK00nv-TBVtwDZCA3scOHg9s.roa (hash: y147gGaB8bkjz0BvOSbEDQ7Eu45dIgspzGe/6ZKyCR0=)
3: qEOOrPTQZOh6drtGLTtLLMOFikw.crl (hash: Ujq0a6B/vqTATkAhx2xY64OPKD1ynC4DzmhlJPYJQ20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c0:d7:8c:e9:c5:3c:bf:71:f7:db:e6:be:ef:e6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Validity
Not Before: Aug 6 05:00:46 2025 GMT
Not After : Aug 7 05:00:46 2025 GMT
Subject: CN=054193a439648792d91462d8eb9bb04fe4eb26b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1a:ee:56:62:23:13:b9:af:5b:53:e9:1a:cd:
9d:e1:7d:99:52:a7:15:91:96:06:b5:2e:56:e7:fa:
ab:12:d1:fe:97:a4:5f:92:3e:ba:f0:9f:ca:da:48:
b4:2d:90:80:82:be:c4:22:09:68:61:5c:78:49:9b:
76:8c:74:b1:24:0e:76:89:4b:f0:b0:b7:06:05:1e:
9c:83:33:39:46:4f:d1:aa:82:21:f4:80:e3:14:b4:
68:25:30:63:30:0f:0b:0c:45:70:b9:b9:c5:1b:11:
5c:01:72:e7:4d:c1:ef:0e:b2:62:3c:e2:a9:23:35:
52:d0:99:b7:e7:2b:e6:3d:d5:6c:b7:0f:3b:0c:b9:
4c:30:9c:f5:88:fc:98:a9:c3:d6:ae:4d:54:bb:e1:
6c:33:9d:ea:91:11:40:02:d3:c3:25:c4:e1:ad:fc:
73:a0:5d:13:6f:7e:12:d8:de:11:e3:da:b6:20:27:
c8:3a:f6:5f:4a:8b:81:3c:3b:8c:a8:f1:8a:cd:bc:
f8:b0:85:82:c7:35:7b:12:1a:3d:e3:56:31:ef:1b:
10:b3:5d:69:af:f3:f4:7d:18:88:7a:17:5c:55:e2:
1c:41:39:76:ed:58:24:dc:68:b4:a2:af:72:5f:a2:
de:ab:2c:db:fc:c4:2a:74:88:a5:76:67:3f:58:9d:
5f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:41:93:A4:39:64:87:92:D9:14:62:D8:EB:9B:B0:4F:E4:EB:26:B5
X509v3 Authority Key Identifier:
keyid:A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:14:90:bc:f4:0d:95:0a:7e:78:c5:cf:74:9a:64:ff:f2:80:
98:cc:70:b4:c8:a1:2f:88:78:df:43:43:47:1c:95:4a:4d:80:
fe:63:57:0c:83:bc:ce:2a:cc:0f:ac:0e:b7:f5:f3:58:35:dd:
6e:7b:85:fd:25:ef:f9:06:32:78:fe:c0:24:29:c9:3d:e9:77:
f6:ea:4b:84:6d:ba:2f:ef:f9:35:d0:a4:57:db:2a:91:29:d0:
72:31:c0:ba:e0:33:1c:11:a8:78:a5:87:a7:a7:f2:55:9e:e3:
da:ce:26:29:e5:1a:b6:ad:e8:fe:04:a9:65:1a:e1:e0:b6:1f:
a8:2c:83:21:e5:ce:52:71:9c:a6:b7:9f:55:6d:3f:ba:b7:b0:
5b:0c:0c:d7:b0:37:3b:64:7d:b4:ff:2d:ad:7a:06:1b:a2:0b:
5b:ca:c5:03:41:f5:ac:01:84:50:79:5e:cb:f0:2d:76:58:13:
a8:ac:60:04:bc:23:1b:d8:19:ee:12:a7:ff:ff:48:b0:16:80:
4e:c3:1c:07:2d:50:dd:66:30:c8:a9:55:5f:03:48:24:8b:a1:
4c:88:fa:4e:24:8d:ff:24:b9:c3:a2:66:64:60:d4:38:3e:1f:
55:b2:38:71:55:58:39:d3:29:8c:d0:20:35:34:07:f0:22:49:
76:0f:2f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:23:30 2025 by rpki-client